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Elliptic Curves and Class Field Theory 

Barry Mazur* Karl Rubin^ 



Abstract 

Suppose E is an elliptic curve defined over Q. At the 1983 ICM the first 
author formulated some conjectures that propose a close relationship between 
the explicit class field theory construction of certain abelian extensions of 
imaginary quadratic fields and an explicit construction that (conjecturally) 
produces almost all of the rational points on E over those fields. 

Those conjectures are to a large extent settled by recent work of Vatsal 
and of Cornut, building on work of Kolyvagin and others. In this paper 
we describe a collection of interrelated conjectures still open regarding the 
variation of Mordell-Weil groups of E over abelian extensions of imaginary 
quadratic fields, and suggest a possible algebraic framework to organize them. 
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1. Introduction 

Eighty years have passed since Mordell proved that the (Mordell-Weil) group 
of rational points on an elliptic curve E is finitely generated, yet so limited is 
our knowledge that we still have no algorithm guaranteed to compute the rank 
of this group. If we want to ask even more ambitious questions about how the 
rank of the Mordell-Weil group E{F) varies as F varies, it makes sense to restrict 
attention only to those fields for which we have an explicit construction, such as 
finite abelian extensions of a given imaginary quadratic field K. Taking our lead 
from the profound discovery of Iwasawa that the variational properties of certain 
arithmetic invariants are well-behaved if one restricts to subfields of Zp-extensions 
of number fields, we will focus on the following Mordell-Weil variation problem: 

Fixing an elliptic curve E defined over Q, an imaginary quadratic field 
K, and a prime number p, study the variation of the Mordell-Weil group 
of E over finite subfields of the (unique) Z^-extension of K in K . 
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This problem was the subject of some conjectures formulated by the first 
author at the 1983 ICM conjectures which have recently been largely settled by 
work of Vatsal and Cornut ^ building on work of Kolyvagin and others. 

Example. Let E be the elliptic curve + y — — x, p ~ 5, and let K = Q(\/— 7). 
If F is a finite extension of K, contained in the Zg extension of K, then rank E{F) = 
[F n -ftT™*' : K] where -ftT™*' is the anticyclotomic Zs-extension of K (see §2 for the 
definition). One only has an answer like this in the very simplest cases. 

Now with the same E and p, take K = Q(V^26). A guess here would be that 
ranki?(F) = [F O A"™*' : K] + 2, but this seems to be beyond present technology. 

The object of this article is to sketch a package of still-outstanding conjectures 
in hopes that it offers an even more precise picture of this piece of arithmetic. These 
conjectures are in some cases due to, and in other cases build on ideas of, Bertolini 
& Darmon, Greenberg, Gross & Zagier, Haran, Hida, Iwasawa, Kolyvagin, Nekovaf , 
Perrin-Riou, and the authors, among others. 

In sections 3 through 5 we describe the three parts of our picture: the arith- 
metic theory (the study of the Selmer modules over Iwasawa rings that contain the 
information we seek), the analytic theory (the construction and study of the relevant 
L-functions, both classical and p-adic), and the universal norm theory which arises 
from purely arithmetic considerations, but provides analytic invariants. 

In the final section we suggest the beginnings of a new algebraic structure to 
organize these conjectures. This structure should not be viewed as a conjecture, 
but rather as a mnemonic to collect our conjectures and perhaps predict new ones. 

More details and proofs will appear in a forthcoming paper. 

2. Running hypotheses and notation 

Fix a triple {E, K,p) where E is an elliptic curve of conductor N over Q, K 
is an imaginary quadratic field of discriminant D < — 4, and p is a prime number. 
To keep our discussion focused and as succinct as possible, we make the following 
hypotheses and conventions. 

Assume that p is odd, that N, p and D are pairwise relatively prime, and that 
if E has complex multiplication, then K is not its field of complex multiplication. 
Let Ok C K denote the ring of integers of K. Assume further that there exists an 
ideal TV C Ok such that Ok/J^ is cyclic of order N (this is sometimes called the 
Heegner Hypothesis), and that p is a prime of ordinary reduction for E. For 
simplicity we will assume throughout this article that the p-primary subgroups of 
the Shafarevich-Tate groups of E over the number fields we consider are all finite. 

Proposition 1. Under the assumptions above, rank_B(_ftr) is odd. 

Proof. This follows from the Parity Conjecture recently proved by Nekovar |11| . 

Let Koo denote the (unique) Zp-extension of K and T :— Ga^Koo/^i^), so 
r = Zp. We define the Iwasawa ring 



A := Zp[[T]] Q; 
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(To simplify notation and to avoid some complications, wc will often work with 
Qp- vector spaces instead of natural Zp-modules; in particular we have tensored the 
usual Iwasawa ring with Qp.) For every (finite or infinite) extension F of K in K.^ 
we also define 

Af := Zp[[Gal{F/K)]] Qp, If := ker{A ^ }. 

Then Ik is the augmentation ideal of A, and if [F : K] is finite then Ai? is just the 

group ring Qp[Gal{F/ K)]. If Gal(i^/-fi') is Zp or Z^, and M is a finitely generated 
torsion Ai?-module, then charAp,(M) will denote the characteristic ideal of M. In 
particular charAp(M) is a principal ideal of Ap- 

There is a Qp-projective line of Zp-cxtensions of K, all contained in J^oo- 
Among these are two distinguished Zp-extcnsions: 

• the cyclotomic Zp-extension -ftT^'^', the compositum of K with the unique 
(cyclotomic) Zp-extension of Q (write I^yd = Gal{K^''^ / K) , A^yd = A^cyd), 

• the anticyclotomic Zp-extension -ftT™*', the imique Zp-extension of K that 
is Galois over Q with non-abelian, and in fact dihedral, Galois group (write 

Fanti = Gal{K^''/K), Aanti = A^ajti). 

Then T = Fcyd ® Fanti and A = Acyd ®Zp Aanti- 

Complex conjugation t : K ^ K acts on F, acting as -1-1 on Fcyd and —1 on 
Tanti- This induces nontrivial involutions of A and Aanti j which we also denote by r. 
If M is a module over A (or similarly over Aanti), let M^"^' denote the module whose 
underlying abelian group is M but where the new action of 7 € F on m e M^"^' is 
given by the old action of 7^ on m. 

Our A-modules will usually come with a natural action of Gal(Koo/Q)- These 
actions are continuous and Zp-linear, and satisfy the formula f (7-to) = 7'^-f(m) for 
every lift f of r to Gal(Koo/ Q) • Thus the action of any lift f induces an isomorphism 
M ^ M^'^\ We will refer to such A or Aanti-modules as semi-linear T- modules. 
If M is a semi- linear r-module and is free of rank one over Aanti, we define the sign 
of M to be the sign ±1 of the action of r on the one- dimensional Qp- vector space 
M (8)Aa,„ti Ak- Such an M is completely determined (up to isomorphism preserving 
its structure) by its sign. 

Definition 2. If M and A are semi-linear t -modules, then a (A-bilinear) A-valued 
r-Hermitian pairing tt is a A-module homomorphism n : M ig)A M^'^'> A such 
that for every lift f of t to Gal(Koo/Q) 

7r(m (Sin) = n{n (g) my = n{fn (S fm). 

3. Universal norms 

Definition 3. If K c F c Kqo, the universal norm module U{F) is the pro- 
jective limit 

U{F) := Qp (g) lim {E{L) O Zp) 

KCLCF 
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(projective limit with respect to traces, over finite extensions L of K in F) with 
its natural Kp-structure. If F is a finite extension of K, then U{F) is simply 
E{F)(^Qp. 

If F is a Zp-extension of K, then U{F) is a free Ai^-module of finite rank, and 
is zero if and only if the Mordell-Weil ranks of E over subfields of F are bounded 
(of. [5] §18 or J2 §2-2). The first author conjectured some time ago |S| that for 
Zp-extensions F/K, and under our running hypotheses, U{F) = ii F ^ K^^^ and 
U{K^^^) is free of rank one over Aanti- The following theorem follows from recent 
work of Kato (51 for K^"^ and Vatsal US] and Cornut [T] for K^^K 

Theorem 4. U{K2'=^) = and U{K^*') is free of rank one over Aanti ■ 

For the rest of this paper we will write U for the anticyclotomic universal norm 
module U{K^^^). Complex conjugation gives U a natural semi-linear r-module 
structure. Since U is free of rank one over Aanti, we conclude that U is completely 
determined (up to isomorphism preserving its r-structure) by its sign. 

Let be the rank of the ±1 eigenspace of r acting on E{K), so ranki?(Q) = 
r+ and ra,nk E{K) = r+ + r^. By Proposition^ ia.BkE{K) is odd so r+ ^r~ . 

Conjecture 5 (Sign Conjecture). The sign of the semi-linear r-module U is +1 
if r^ > r^ , and is —1 if r^ > r+. 

Remark. Equivalently, the Sign Conjecture asserts that the sign of is +1 if twice 
ranki?(Q) is greater than ranki?(if), and —1 otherwise. 

As we discuss below in §4, the Sign Conjecture is related to the nondegeneracy 
of the p-adic height pairing (see the remark after Conjecture II 1|1 . 

The Aanti-module hi comes with a canonical Hermitian structure. That is, the 
canonical (cyclotomic) p-adic height pairing (see ^01 and ^2] §2.3) 

h : ^ (^A.nt. ^^^-^ * Tcycl ®Zp Aanti 

is a T-Hermitian pairing in the sense of Definition [2| 

Conjecture 6 (Height Conjecture). The homomorphism h is an isomorphism 
of free Aanti -'^lodM/es of rank one 

h:U ^A^^.^U'-''^ ^ Tcycl (»Zp Aanti- 

The Aanti-module U has an important submodulc, the Heegner submodule 
H C U. Fix a modular parameterization Xo{N) E. The Heegner submodule 
H is the cyclic Aanti-module generated by a trace-compatible sequence c — {cl} of 
Heegner points cl G E{L)®7ip for finite extensions L oi K in if^*'. See for example 
|H1 §19 or §3. Call such a c G 7i a Heegner generator. The Heegner generators 
of Ti are well-defined up to multiplication by an element of itF C (Aanti) ^- The 
Aanti-submodule TL d hi is stable under the semi-linear r-structure of lA, so the 
action of t gives an isomorphism U/Ti, ^ {U/TCY'^^ = U'''^^ /Ti'^^\ 

Let c'"^' denote the element c viewed in the Aanti-module Ti'^^K Since 

(±7c) 0A,„,. (±7c)(") = c0A„,, c(") 
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for every ±7 G ±r, the element c(8)c'^'^^ G '^®Aa„ti '^^^^ is independent of the choice 
of Heegner generator, and is therefore a totally canonical generator of the free, rank 
one Aanti-module Ti. ^k^^^^ H^'^\ 

Definition 7. The Heegner i-function (for the triple {E,K,p) satisfying our 
running hypotheses) is the element 

C := h(c® c(^)) e Tcycl ®Zp Aanti- 

Conjecture 8. Fcyd ® cha,r{U /H)^ = Aanti-C inside Fcyd Aanti- 

One sees easily that Fcyd ^ char(W/7Y)^ D Aanti-C, and that Conjecture |H1 is 
equivalent to the Height Conjecture (Conjecture EJ- 



4. The analytic theory 

The ( "two- variable" ) p-adic L-function for E over K is an element L g A 
constructed by Haran 3 and by a different, more general, method by Hida (see 
also the papers of Pcrrin-Riou |13l ll4j V The L-function L is characterized by the 
fact that it interpolates special values of the classical Hasse-Weil L-function of twists 
of E over K. More precisely, embedding Q both in C and Qp, if x : T ^ Z'* 
is a character of finite order then 

/T \ / \ -^classical(£'/Arj Xi 1) / a \ 

X(L)-C(x) (4.1) 

where LdassicaK-E/i^-, Xi s) is the Hasse-Weil L-function of the twist of E/j^ by %, 
c(x) is an explicit algebraic number (cf. 13 Theoreme 1.1), is the modular form 
on ro(A^) corresponding to E, and WfsW is its Petersson norm. 

Projecting L S A to the cyclotomic or the anticyclotomic line via the natural 
projections A Acyd and A Aanti, we get "one- variable" p-adic L-functions 

L I— !■ Lcycl e Acycl and L 1-^ Lanti € Aanti. 

It follows from the functional equation satisfied by L (J3| Theoreme 1.1) and the 
Heegner Hypothesis that Lanti = 0. In other words, viewing A = AantiiPcyd]] as the 
completed group ring of Fcyd with coefficients in Aanti, we have that the "constant 
term" of L G Aanti [[Fcyd]] vanishes. We now consider its "linear term." 
There is a canonical isomorphism of (free, rank one) Aanti-modules 

Fcyd ®Zp Aanti — Isanti /Isanti 



which sends 7 (g) 1 e Fcyd ®Zp Aanti to 7 - 1 e Isanti /I' 



Conjecture 9 (A-adic Gross-Zagier Conjecture). Let L' denote the image of 
L under the map Ij^'ami /I^ant. ^ Fcyd Aanti. Then 

L' ^ d-^C 

where d is the degree of the modular parametrization Xq{N) E. 
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Remark. Perrin-Riou J3] proved that if p splits in K and the discriminant D of 
K is odd, then L' and d~^C have the same image under the projection Aanti ~^ 

= Qp 

Let I := Ik, the augmentation ideal of A. For every integer r > we have 
jry-jr+i ^ Sym^p (r) (g) Qp. Using the direct sum decomposition T = Fcyd ® Fanti we 
get a canonical direct sum decomposition 

Sym^^(r) = e^r^--''^^' where V'^ := (Feyci)®* (ra„ti)®-''. (4.2) 

Consider the canonical (two-variable) p-adic height pairing 

( , ) : E{K) X E{K) — >T(g)Qp. (4.3) 

Set r = rank E{K), which is odd by Proposition^ Define the two- variable p-adic 
regulator Rp{E,K) to be the discriminant of this pairing: 

Rp{E,K) t-^det(P,,P,) e Sym^^(r) ® Qp - T /r+\ 

where {Pi, . . . , Pr} generates a subgroup of E{K) of finite index t. For each integer 
j = 0, . . . , r let Rp{E, Ky-^-i be the projection of Rp{E, K) into F*-^ J (g) Qp under 
(jT^ . so that 

Rp{E,K) = Rp{E,KY-^\ 

Recall that is the rank of the ±l-eigenspace E{K)^ of r acting on E{K). 

Proposition 10. Rp{E, KY^^'^ — unless j is even and j < 2min(r+,r^). 

Proof. This follows from the fact that the height pairing (|4.3|) is r-Hermitian, so 
{Tx,Ty) = {x,yY , and therefore the induced height pairings 

E{K)^ X E{K)^ ^ Fanti ® Qp, E{K)+ x E{K)- ^ Feyci ® Qp 

vanish. 

Conjecture 11 (Maximal nondegeneracy of the height pairing). If j is even 
and < j < 2 min(r+, r") then Rp{E, Kf-^^^ ^ 0. 

Remark. Conjecture ^2 or more specifically the nonvanishing of Rp{E, KY~^'^ 
when j — 2 min(r+, r"), implies the Sign Conjecture (ConjecturelS)). This is proved 
in the same way as Proposition llUI using the additional fact that the anticyclotomic 
universal norms in E{K) (g) Zp are in the kernel of the anticyclotomic p-adic height 
pairing {E{K) (g) Zp) x {E{K) (g) Zp) ^ Fanti ® Qp- 
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5. The arithmetic theory 

For every algebraic extension F of K, let Se\p{E/p) denote the p-power Selmer 
group of E over F, the subgroup of H^{Gf, E[p°°]) that sits in an exact sequence 

— ^ E{F) (g) Qp/Zp SclpiEfp) UI{EfF)[p°^] — > 
where is the Shafarevich-Tate group of E over F. Also write 

SpiE/p) = RomiSelpiEfp), Qp/Zp) (g> Qp 

for the tensor product of Qp with the Pontrjagin dual of the Selmer group. 

The following theorem is proved using techniques which go back to 0; see |21 
and [El Lemme 5, §2.2. 

Theorem 12 (Control Theorem). Suppose K C F C Koo- 

(i) The natural restriction map H^{F, E[p°°]) H^(K.oc, E[p°°]) induces an iso- 
morphism Sp{E ^k^) (g) a — * Sp{E^F). 

(ii) There is a canonical isomorphism U{F) — > llomAp{Sp{E/F),Ap). 

Conjecture 13 (Two- variable main conjecture |8l I12| ^. The two-variable p- 
adic L-function L generates the ideal charA(5p(i?/Koo )) of A. 

Restricting the two- variable main conjecture to the cyclotomic and anticyclo- 
tomic lines leads to the following "one-variable" conjectures originally formulated 
in [5j and jj^jj respectively. Let L' denote the image of L in Fcyci g)Zp Aanti as in 
ConjectureEl and Sp{E /f^anti)to^s the Aanti-torsion submodulc of Sp{E / j^anti)) . 

Conjecture 14 (Cyclotomic and anticyclotomic main conjectures). 

(i) icyci generates the ideal chaiA^^^^{Sp{E^j^oyci)) o/Acyci- 

(ii) L' generates Fcyci <^ charA^u (5p(i?/ifanti)tors) inside Fcyci ^ Aanti- 

Remark. Using Euler systems, Kato |Hj and Howard |S] have proved (under some 
mild additional hypotheses) divisibilities related to the cyclotomic and anticyclo- 
tomic main conjectures, respectively, namely 

Lcyci e charA^y^,(5p(-B/^cyci)), charA^t; (W/7Y)^ C charA„,ti(5p(i;/^cyci)tors) 

(note that Conjectures |H| and predict that Fcyci (Xi chaTA^^^.{U /H)^ = i'Aanti)- 

Conjecture 15 (Two- variable p-adic BSD conjecture). Let r — ia,nkE{K). 
The two-variable p-adic L-function L G A is contained T~ and 

L = c{xtrwmUI{E/K))l[c, ■ Rp{E,K) (modF+i) 

V 

where c(xtriv) is the rational number in the interpolation formula H4.1(l for the trivial 
character, Iil{E/ji) is the Shafarevich-Tate group of E over K , and the Cy are the 
Tamagawa factors in the (usual) Birch and Swinnerton-Dyer conjecture for E over 
K. 
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6. Orthogonal A- modules 

In this final section we introduce a purely algebraic template which, when it 
"fits" , gives rise to many of the properties conjectured in the previous sections. 

Keep the notation of the previous sections. In particular r : A — > A is the 
involution of A induced by complex conjugation on K, and if is a A-module, 
then y''^-' denotes V with A-module structure obtained by composition with r. Let 
V* = HomA(V, A). If y is a free A-module of rank r, then detA(l^^) will denote 
the r-th exterior power of V and a r-gauge on y is a A-isomorphism between the 
free A-modules of rank one 

tv ■■ detA(F*) ?^detA(FM) 

or equivalently an isomorphism detA(l^) detA(V^*-^-') — > A. 

By an orthogonal A-module we mean a free A-module V with semi-linear 
r-structure endowed with a r-gauge ty and a A-bilinear r-Hermitian pairing (Def- 
inition 121 

■k:V®a V^''^ — y A. 

Viewing tt as a A-linear map 

]/(^) ^ V*, the composition 

tv o detA(7r) : detA(V^^^^) — > detA(V"*) — > detA{V'^^^) 

must be multiplication by an element disc(V^) e A that we call the discriminant 
of the orthogonal A-module V. We further assume that disc(V") ^ 0, and we define 
M — M(y, tt) to be the cokernel of the (injcctive) map tt : V^'^'' V*, so we have 

— > — >V* — > M — >0. (6.1) 

If i^T C F C Koo, rccaU that I_f = kcr{A ^ A^} and define 

V{F) -.^{xeV: tt{x, C If}/1fV ^ ker{V^ ®a Af {V^^'^)* ®a A^} 

and similarly V'^^^F) := ker{V^(^) ® Aj. ^ V*^Af}. Any lift f of r to Gal(Koo/Q) 
induces an isomorphism V{F) V'^'^^F). From Ki.lll we obtain 

— > y(^' (F) — > (SaAf — >V*^aAf — > M^aAf — >0 (6.2) 

and (applying IIom( • , Af) and using the Hermitian property of tt) 

F(F) = HomA^(M(8)A Af,Af). (6.3) 

We have an induced pairing 

ttf:V^^\F) V{F)^If/II, 

which we call the i^-derived pairing. If F is stable under complex conjugation then 
V'^'^^F) is canonically isomor phic to \/(F)(^) and ttf is T- Hermitian. 
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Now suppose F = K^^K By (|^ . V{K^^') is free over Aanti- Applying the 
determinant functor to 16.2(1 . the r-gauge ty induces an isomorphism 

detA„, = detA^nU ^^"H^Si'") ^ Hom(dctA„„jM®A Aanti), Aanti). 

If V{K^^^) has rank one over Aanti, then V{K^^^) contains a unique maximal 
T-stable submodule H such that the map 

y(^anti)(r) ^ Hom(dct A„, (M (5§ A^nti) , A^nti) 

D Hom(M (g> Aanti, Aanti) = V{K^'') 

sends i/^^^ into H. (Namely, = JV"(i^™*') where J is the largest ideal of Aanti 
such that = J and C charA„,ti (M ® Aanti)tors-) 

Recall that Selp{E/F) denotes the p-power Selmer group of E over F and 
Sp{E/p) = Hom(Selp(£;/p^), Qp/Zp) ^ Qp. 

Proposition 16. With notation as above, suppose that V is an orthogonal A- 
module and Lpv : M ^ Sp{E ^i^^) is an isomorphism. Then for every extension 
F of K in Koo, </5y induces an isomorphism 

V{F) ^ U{F) 

where U{F) is the universal norm module defined in 

proof. This follows directly from Theorem 1121 and (|6.3|l . 

Definition 17. We say that the orthogonal A-module V organizes the anticy- 
clotomic arithmetic of {E,K,p) if the following three properties hold. 

(a) disc(y) = L, the two-variable p-adic L-function of E. 

(b) There is an isomorphism ipv '■ M — * Sp{E/ii^). 

(c) The isomorphism V{K^^') = U of Proposition^^ identifies H C V{K^*-^) 
with the Heegner submodule Ti <Z U , and identifies the K^^^ -derived pairing 
with the canonical p-adic height pairing into Isanti /I^a„ti = Fcyd ® Aanti- 

Question. Given E^ K, and p satisfying our running hypotheses, is there an or- 
thogonal A-module V that organizes the anticyclotomic arithmetic of {E,K,p)7 

If one is not quite so (resp., much more) optimistic one could formulate an 
analogous question with the ring A replaced by the localization of A at I (resp., 
with A replaced by Zp[[r]]). 

Question. If V is an orthogonal A-module V which organizes the anticyclotomic 
arithmetic of {E,K,p), then for every finite extension F of K in Koo, we have an 
isomorphism E{F) (g) Qp = U{F) = V{F) as in Proposition El a p-adic height 
pairing on E{F) ® Qp, and the F-derived pairing on V{F). How are these pairings 
related? 

When F = K^^^ condition (c) says that the two pairings are the same, but it 
seems that in general they cannot be the same for finite extensions F/K. 
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Theorem 18. Suppose that there is an orthogonal A-module V that organizes the 
anticyclotomic arithmetic of{E,K,p). Then Conjectures (the 2-variahle main 
conjecture), and \14^ i) (the cyclotomic main conjecture) hold. 

If further the induced pairing V{K;^^^) (g) V"(X™*')('^^ Tcyd ® Aanti is sur- 
jective, then Conjectures\^ (the Height Conjecture),\^\^ (the K-adic Gross- Zagier 
conjecture), and \14)f ii) (the anticyclotomic main conjecture) also hold. 

Brief outline of the proof of Theorem \18l Since disc(l^) is a generator of charA(-M), 
the two-variable main conjecture follows immediately from (a) and (b) of Definition 
1171 The cyclotomic main conjecture follows from the two-variable main conjecture. 

Now suppose that the induced pahing V{K^*') (g) ^(if™*')^^) Tcyd «> Aanti 
is surjective. By (c) of Definition El this is equivalent to the Height Conjecture, 
which in turn is equivalent to Conjecture |S1 

Howard proved in |S] that 5p(i?//j-anti) is pseudo-isomorphic to Aanti ® B'^ 
where i? is a r-stable torsion Aanti-module. By Theorem \l2{ i) the same is true 
of M (g) Aanti, and so the remark at the end of the definition of H shows that 
H = cha.r{B)V{K^^'). Using H6.2|l . (|6.3|l . and our assumption that the induced 
pairing is surjective, one can show that the image of L in Ij^ami /Isanti generates 
char(_B)^Ij^anti/I?,a„ti. The A-adic Gross-Zagier conjecture and the anticyclotomic 
main conjecture follow from these facts and (c). □ 
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